Introducing Nova (ICLR’25), foundation models for binary/assembly code. We have also released fine-tuned models for binary code decompilation. Preprint: arxiv.org/pdf/2311.13721
#LLM4Code #LLM #BinaryAnalysis #Security
@cerias.bsky.social @iclr-conf.bsky.social
#LLM4Code #LLM #BinaryAnalysis #Security
@cerias.bsky.social @iclr-conf.bsky.social
January 28, 2025 at 7:08 PM
Introducing Nova (ICLR’25), foundation models for binary/assembly code. We have also released fine-tuned models for binary code decompilation. Preprint: arxiv.org/pdf/2311.13721
#LLM4Code #LLM #BinaryAnalysis #Security
@cerias.bsky.social @iclr-conf.bsky.social
#LLM4Code #LLM #BinaryAnalysis #Security
@cerias.bsky.social @iclr-conf.bsky.social
Nyxelf: A Linux ELF tool for analyzing malicious Linux ELF binaries that supports static and dynamic analysis
🔗Check it out:
github.com/M3rcuryLake/...
#binaryanalysis #linuxelf #reverseengineering #malwareanalysis #threathunting #infosec
🔗Check it out:
github.com/M3rcuryLake/...
#binaryanalysis #linuxelf #reverseengineering #malwareanalysis #threathunting #infosec
GitHub - M3rcuryLake/Nyxelf: Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and dynamic analysis techniques.
Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and dynamic analysis techniques. - M3rcuryLake/Nyxelf
github.com
May 4, 2025 at 3:12 AM
Nyxelf: A Linux ELF tool for analyzing malicious Linux ELF binaries that supports static and dynamic analysis
🔗Check it out:
github.com/M3rcuryLake/...
#binaryanalysis #linuxelf #reverseengineering #malwareanalysis #threathunting #infosec
🔗Check it out:
github.com/M3rcuryLake/...
#binaryanalysis #linuxelf #reverseengineering #malwareanalysis #threathunting #infosec
🚨 Postdoc opening (24 months) in software security & fuzzing!
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
April 27, 2026 at 5:44 PM
🚨 Postdoc opening (24 months) in software security & fuzzing!
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Original text by Adam Bromiley
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Potatosecurity
core-jmp.org/2026/03/tami...
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Potatosecurity
core-jmp.org/2026/03/tami...
March 13, 2026 at 1:06 AM
Original text by Adam Bromiley
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Potatosecurity
core-jmp.org/2026/03/tami...
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Potatosecurity
core-jmp.org/2026/03/tami...
Your target is a binary object file or a proprietary firmware blob. You have no docs and no debug symbols. What’s the first tool you fire up to find the logic — Hex editor, Ghidra, or a custom script to map the entropy? #reverseengineering #binaryanalysis
July 24, 2026 at 9:00 AM
Your target is a binary object file or a proprietary firmware blob. You have no docs and no debug symbols. What’s the first tool you fire up to find the logic — Hex editor, Ghidra, or a custom script to map the entropy? #reverseengineering #binaryanalysis
fwiw,
#Akai #MPD218 Preset File Format (.mpd218)
akai-mpd218_preset_file_format.md
gist.github.com/mxmilkiib/018f4a55a529640427a29f143a3978d3
generated by Claude Sonnet + GPT-5 (high reasoning)
#midi #controller #sysex #controllerism #fileformat #binaryanalysis #djing #creativecoding
#Akai #MPD218 Preset File Format (.mpd218)
akai-mpd218_preset_file_format.md
gist.github.com/mxmilkiib/018f4a55a529640427a29f143a3978d3
generated by Claude Sonnet + GPT-5 (high reasoning)
#midi #controller #sysex #controllerism #fileformat #binaryanalysis #djing #creativecoding
Akai MPD218 Preset File Format (.mpd218)
Akai MPD218 Preset File Format (.mpd218). GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
September 27, 2025 at 6:08 PM
fwiw,
#Akai #MPD218 Preset File Format (.mpd218)
akai-mpd218_preset_file_format.md
gist.github.com/mxmilkiib/018f4a55a529640427a29f143a3978d3
generated by Claude Sonnet + GPT-5 (high reasoning)
#midi #controller #sysex #controllerism #fileformat #binaryanalysis #djing #creativecoding
#Akai #MPD218 Preset File Format (.mpd218)
akai-mpd218_preset_file_format.md
gist.github.com/mxmilkiib/018f4a55a529640427a29f143a3978d3
generated by Claude Sonnet + GPT-5 (high reasoning)
#midi #controller #sysex #controllerism #fileformat #binaryanalysis #djing #creativecoding
In this #OpenAccess article, methods of translating malicious code (#Microcode, #PCode, #LLIL) were tested to see their impact on #malware detection, showing how choices affect accuracy, #data needs, and model performance.
Read: bit.ly/4glKiLs
#MachineLearning #BinaryAnalysis #OpenScience #ACRT
Read: bit.ly/4glKiLs
#MachineLearning #BinaryAnalysis #OpenScience #ACRT
September 10, 2025 at 12:40 PM
In this #OpenAccess article, methods of translating malicious code (#Microcode, #PCode, #LLIL) were tested to see their impact on #malware detection, showing how choices affect accuracy, #data needs, and model performance.
Read: bit.ly/4glKiLs
#MachineLearning #BinaryAnalysis #OpenScience #ACRT
Read: bit.ly/4glKiLs
#MachineLearning #BinaryAnalysis #OpenScience #ACRT
#News: CodeSecure and FOSSA Partner to Deliver Single Integrated Platform for Binary and Open Source Analysis:
www.businesswire.com/news/home/20...
#BinaryAnalysis #SBOM #SoftwareSupplyChain #DevSecOps #AppSec #OpenSource #Security #BCA #Compliance #ThirdPartyRisk
www.businesswire.com/news/home/20...
#BinaryAnalysis #SBOM #SoftwareSupplyChain #DevSecOps #AppSec #OpenSource #Security #BCA #Compliance #ThirdPartyRisk
CodeSecure and FOSSA Partner to Deliver Single Integrated Platform for Binary and Open Source Analysis
Together CodeSentry-FOSSA allows customers to generate comprehensive SBOMs that trace both open source and binaries contained in their software.
www.businesswire.com
April 9, 2025 at 3:41 PM
#News: CodeSecure and FOSSA Partner to Deliver Single Integrated Platform for Binary and Open Source Analysis:
www.businesswire.com/news/home/20...
#BinaryAnalysis #SBOM #SoftwareSupplyChain #DevSecOps #AppSec #OpenSource #Security #BCA #Compliance #ThirdPartyRisk
www.businesswire.com/news/home/20...
#BinaryAnalysis #SBOM #SoftwareSupplyChain #DevSecOps #AppSec #OpenSource #Security #BCA #Compliance #ThirdPartyRisk
🚨 Postdoc opening (24 months) in software security & fuzzing!
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
September 14, 2026 at 10:24 AM
🚨 Postdoc opening (24 months) in software security & fuzzing!
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Customer success in action. ⭐
“I use Finite State for Binary Scanning and Vulnerability analysis. It has a straightforward FS-CLI and UI options.”
Thanks to Venkat for sharing your experience on G2. https://bit.ly/3TLMV1O
#ProductSecurity #BinaryAnalysis
“I use Finite State for Binary Scanning and Vulnerability analysis. It has a straightforward FS-CLI and UI options.”
Thanks to Venkat for sharing your experience on G2. https://bit.ly/3TLMV1O
#ProductSecurity #BinaryAnalysis
September 3, 2026 at 2:35 PM
Customer success in action. ⭐
“I use Finite State for Binary Scanning and Vulnerability analysis. It has a straightforward FS-CLI and UI options.”
Thanks to Venkat for sharing your experience on G2. https://bit.ly/3TLMV1O
#ProductSecurity #BinaryAnalysis
“I use Finite State for Binary Scanning and Vulnerability analysis. It has a straightforward FS-CLI and UI options.”
Thanks to Venkat for sharing your experience on G2. https://bit.ly/3TLMV1O
#ProductSecurity #BinaryAnalysis
Next up was Achamyeleh et al.'s "AGNOMIN - Architecture Agnostic Multi-Label Function Name Prediction," an architecture-agnostic #GNN for predicting function names in stripped binaries across architectures. (www.acsac.org/2025/p...) 4/6
#ReverseEngineering #BinaryAnalysis
#ReverseEngineering #BinaryAnalysis
August 13, 2026 at 2:00 PM
Next up was Achamyeleh et al.'s "AGNOMIN - Architecture Agnostic Multi-Label Function Name Prediction," an architecture-agnostic #GNN for predicting function names in stripped binaries across architectures. (www.acsac.org/2025/p...) 4/6
#ReverseEngineering #BinaryAnalysis
#ReverseEngineering #BinaryAnalysis
Six Faces, Twenty-Four Bytes: Reversing S01den's Pocket-Cube Crackme
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
Six Faces, Twenty-Four Bytes: Reversing S01den's Pocket-Cube Crackme
A 14 KB Linux ELF whose only imports are `strcpy`, `puts` and `strlen` turns out to be a complete 2×2×2 Rubik's-cube engine: your "flag" is a string of face-turn letters, the binary spins a scrambled cube stored in `.data`, and it prints `G00d flag!` only when all six faces come out solid. This is t
www.ehabhussein.com
July 2, 2026 at 10:39 PM
Six Faces, Twenty-Four Bytes: Reversing S01den's Pocket-Cube Crackme
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
Radare2 v6.1.4 🌪️
Before: Manual segment permission patching. Now: rabin2-OP automates it. Support for inline NDS32 calls with expanded #binaryanalysis hooks. Memory safety fixes throughout. Breaking API changes ahead—check docs. #infosec
→ releaseport.com/t/xc
Before: Manual segment permission patching. Now: rabin2-OP automates it. Support for inline NDS32 calls with expanded #binaryanalysis hooks. Memory safety fixes throughout. Breaking API changes ahead—check docs. #infosec
→ releaseport.com/t/xc
April 13, 2026 at 4:15 AM
Radare2 v6.1.4 🌪️
Before: Manual segment permission patching. Now: rabin2-OP automates it. Support for inline NDS32 calls with expanded #binaryanalysis hooks. Memory safety fixes throughout. Breaking API changes ahead—check docs. #infosec
→ releaseport.com/t/xc
Before: Manual segment permission patching. Now: rabin2-OP automates it. Support for inline NDS32 calls with expanded #binaryanalysis hooks. Memory safety fixes throughout. Breaking API changes ahead—check docs. #infosec
→ releaseport.com/t/xc
Still manually writing your own z3 constraints for binary analysis, or have you moved to something like Angr or Manticore? I want to know your favorite approach for solving complex path conditions. #RE #binaryanalysis
June 1, 2026 at 1:00 AM
Still manually writing your own z3 constraints for binary analysis, or have you moved to something like Angr or Manticore? I want to know your favorite approach for solving complex path conditions. #RE #binaryanalysis
Original text by Adam Bromiley
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Cybersecurity
core-jmp.org/2026/03/tami...
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Cybersecurity
core-jmp.org/2026/03/tami...
Taming the dragon: reverse engineering firmware with Ghidra
The article explains how to reverse engineer embedded firmware using Ghidra, covering techniques for loading firmware, identifying CPU architectures, analyzing functions, and using scripts/plugins to understand device logic and discover vulnerabilities.
core-jmp.org
March 13, 2026 at 1:06 AM
Original text by Adam Bromiley
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Cybersecurity
core-jmp.org/2026/03/tami...
Introduction
I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Cybersecurity
core-jmp.org/2026/03/tami...
AGNOMIN improved precision by up to 27.17% and recall by up to 55.86% on 9,000 ELF binaries across three architectures, and added a 5.89% recall gain on unseen architectures. Read more: https://getnews.me/agnomin-introduces-architecture-agnostic-multi-label-function-naming/ #agnomin #binaryanalysis
October 3, 2025 at 12:00 PM
AGNOMIN improved precision by up to 27.17% and recall by up to 55.86% on 9,000 ELF binaries across three architectures, and added a 5.89% recall gain on unseen architectures. Read more: https://getnews.me/agnomin-introduces-architecture-agnostic-multi-label-function-naming/ #agnomin #binaryanalysis
ContraBin, a learning framework, embeds source code, comments and binary fragments. Synthetic comments improve embedding quality, while human comments may reduce performance. Read more: https://getnews.me/contrabin-contrastive-learning-boosts-binary-code-analysis/ #contrabin #binaryanalysis
September 29, 2025 at 6:30 PM
ContraBin, a learning framework, embeds source code, comments and binary fragments. Synthetic comments improve embedding quality, while human comments may reduce performance. Read more: https://getnews.me/contrabin-contrastive-learning-boosts-binary-code-analysis/ #contrabin #binaryanalysis
Legacy security testing leaves mobile apps vulnerable to third-party risks. Without deeper binary analysis, attackers can exploit blind spots in the software supply chain. jpmellojr.blogspot.com/2025/05/mobi... #AppSec #MobileSecurity #BinaryAnalysis #SecurityTesting
Mobile and third-party risk: How legacy testing leaves you exposed
Risks to software supply chains from mobile applications are increasing, largely due to a lack of deep visibility into the software's codeb...
jpmellojr.blogspot.com
May 2, 2025 at 3:57 PM
Legacy security testing leaves mobile apps vulnerable to third-party risks. Without deeper binary analysis, attackers can exploit blind spots in the software supply chain. jpmellojr.blogspot.com/2025/05/mobi... #AppSec #MobileSecurity #BinaryAnalysis #SecurityTesting
Changes to the CVE program signal a critical moment for AppSec strategies. It's time to modernize your approach to risk management. jpmellojr.blogspot.com/2025/04/chan... #CVE #NVD #AppSec #BinaryAnalysis #RiskManagement #SoftwareSecurity
Changes to CVE program are a call to action on your AppSec strategy
For the countless organizations that have relied on CVEs and the National Vulnerability Database to support vulnerability management and c...
jpmellojr.blogspot.com
April 24, 2025 at 3:49 PM
Changes to the CVE program signal a critical moment for AppSec strategies. It's time to modernize your approach to risk management. jpmellojr.blogspot.com/2025/04/chan... #CVE #NVD #AppSec #BinaryAnalysis #RiskManagement #SoftwareSecurity
DWARF also enables symbolicated backtraces and setting line-level breakpoints, making complex binary analysis much clearer in GDB. #BinaryAnalysis 3/6
May 29, 2025 at 12:00 PM
DWARF also enables symbolicated backtraces and setting line-level breakpoints, making complex binary analysis much clearer in GDB. #BinaryAnalysis 3/6
Fourth in the session was Fan et al.'s "R+R: A Systematic Study of Cryptographic Function Identification Approaches in Binaries," exploring gaps in cryptographic tool evaluation. (www.acsac.org/2024/p...) 5/6
#Cybersecurity #BinaryAnalysis
#Cybersecurity #BinaryAnalysis
October 16, 2025 at 2:02 PM
Fourth in the session was Fan et al.'s "R+R: A Systematic Study of Cryptographic Function Identification Approaches in Binaries," exploring gaps in cryptographic tool evaluation. (www.acsac.org/2024/p...) 5/6
#Cybersecurity #BinaryAnalysis
#Cybersecurity #BinaryAnalysis
📣 The finalists for the #ACSAC2023 Artifacts Competition and Impact Award have been announced, ranging from #SGX #exploitation, to #cybersecurity #experimentation, to #binaryanalysis and #binary #rewriting 📣 Find more details on the #ACSAC2023 website: www.acsac.org/2023/p...
November 28, 2023 at 3:00 PM
📣 The finalists for the #ACSAC2023 Artifacts Competition and Impact Award have been announced, ranging from #SGX #exploitation, to #cybersecurity #experimentation, to #binaryanalysis and #binary #rewriting 📣 Find more details on the #ACSAC2023 website: www.acsac.org/2023/p...
What’s really inside the “black box”? 🧠 Break VM obfuscation. Decode hidden logic. Think like a reverser. Join the deep dive — 8 May, 6 PM IST.
👉🏻 forms.gle/vkZwoxbBT7WX...
#ReverseEngineering #MalwareAnalysis #BinaryAnalysis #CyberSecurity #LiveWebinar #CTF #RedTeam #CyberWarfareLabs
👉🏻 forms.gle/vkZwoxbBT7WX...
#ReverseEngineering #MalwareAnalysis #BinaryAnalysis #CyberSecurity #LiveWebinar #CTF #RedTeam #CyberWarfareLabs
May 4, 2026 at 1:30 PM
What’s really inside the “black box”? 🧠 Break VM obfuscation. Decode hidden logic. Think like a reverser. Join the deep dive — 8 May, 6 PM IST.
👉🏻 forms.gle/vkZwoxbBT7WX...
#ReverseEngineering #MalwareAnalysis #BinaryAnalysis #CyberSecurity #LiveWebinar #CTF #RedTeam #CyberWarfareLabs
👉🏻 forms.gle/vkZwoxbBT7WX...
#ReverseEngineering #MalwareAnalysis #BinaryAnalysis #CyberSecurity #LiveWebinar #CTF #RedTeam #CyberWarfareLabs
One book > a thousand patches. amzn.to/4cCycfi I earn a commission with you make a purchase. #ad #BinaryAnalysis #Sysadmin
Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly
Compre online Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly, de Andriesse, Dennis na Amazon. Frete GRÁTIS em milhares de produtos com o Amazon Prime. Encontre diversos livros escritos por Andriesse, Dennis com ótimos preços.
amzn.to
April 25, 2026 at 7:49 PM
One book > a thousand patches. amzn.to/4cCycfi I earn a commission with you make a purchase. #ad #BinaryAnalysis #Sysadmin
`seama`: the D-Link DIR-300's firmware seal, recovered byte-for-byte from one MIPS applet
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
`seama`: the D-Link DIR-300's firmware seal, recovered byte-for-byte from one MIPS applet
A stock D-Link DIR-300 rev B5 firmware opens with a 12-byte magic header nobody documents in the GUI. Following it into the rootfs leads to a single multi-call MIPS binary whose `seama_main` defines the whole integrity scheme — a two-record container with an MD5 over *only* the image body. This is t
www.ehabhussein.com
June 25, 2026 at 10:22 PM
`seama`: the D-Link DIR-300's firmware seal, recovered byte-for-byte from one MIPS applet
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve